Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of cybersecurity safeguards for all systems handling federal contract information, with strict adherence to NIST SP 800-171 standards to protect controlled unclassified information. Compliance includes deploying access controls, audit mechanisms, media protection, personnel security, and system and communications protections as outlined in the NIST framework, alongside the timely reporting of any cyber incidents to the Department of Defense in accordance with DFARS 252.204-7012 requirements. All systems must be configured to meet mandatory security controls, and contractors are responsible for ensuring their subcontractors also comply with these regulations. This subcontract, issued by the ASC Commodities Division under the Department of Defense, is targeted at organizations capable of securing information systems at the New Cumberland, Pennsylvania location. The solicitation is open for responses until July 31, 2026, under NAICS code 541512 for computer systems design services. Failure to meet the cybersecurity requirements may result in contract termination or financial penalties, and performance must sustain continuous compliance from implementation through contract closure. All activities are subject to DOD oversight and verification to ensure integrity and consistency with federal cybersecurity mandates.